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(57) Abstract: Results of medical test for sexually transmissi- 
ble diseases (STDs) or other medical conditions such as drug 
use are posted to registry site (112) accessible by subscriber and 
subscriber-authorized guests (120). Medical test results are as- 
sociated with subscriber identity verification (108), which may 
be a driver's bcense number, or other indicia of identification, 
recorded when a test sample was drawn by a testing lab affili- 
ated with the registry site (104). Results of the test performed 
by the testing lab are automatically posted to the registry site 
(112), along with subscriber's pre-assigned customer ID (100) 
and verification of subscriber's identity (104). Subsequendy, 
subscriber and authorized guests can access the subscriber's test 
results (120) and the verification of the subscriber's identity by 
entering a predefined password or other access code, thereby 
enabling the guest, who may be a prospective sexual partner, to 
verify a medical condition asserted by the subscriber (122). 
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USE OF INTERNET SITE AS A REGISTRY FOR RESULTS OF 

MEDICAL TESTS 
Related Patent Application 

This application is based on prior copending U.S. provisional patent 
application, Serial No. 60/185,562, filed February 28, 2000, the benefit of the 
filing date of which is hereby claimed under 35 U.S.C. § 1 19(e). 

Field of the Invention 
This invention generally relates to a method and system for reporting 
medical test results over a network, and more specifically, to providing a registry 
at which subscribers' medical test results can be accessed over a public network 
by the subscribers. 

Background of the Invention 

The potential for contracting life threatening or currently incurable 
diseases such as human immunodeficiency virus (HIV or acquired 
immunodeficiency syndrome (AIDS)) through sexual contact with infected 
partners has substantially changed attitudes about engaging in casual sex in our 
society While certain measures can minimize the risk that a sexually 
transmissible disease will be transmitted from one partner to another, many people 
have viewed that risk as too great to justify a sexual relationship with another 
20 person. One way in which prospective sexual partners can minimize the risk and 
alleviate the dampening effects of concern about contracting such diseases from 
the other partner is to first ensure that each partner has recently been tested for at 
least life threatening or currently incurable sexual diseases, with negative results. 

In many cases, a verbal assurance by a prospective sexual partner that the 
25 person has recently been tested for diseases such as HIV, genital herpes, hepatitis 
B or hepatitis C will not be sufficient to convince the other partner to engage in 
sex since the person giving the assurance may not have been tested or may have 
been tested with positive results for such diseases. Proof of the testing is 
somewhat hard to provide, particularly when the prospective sexual union has 
30 occurred following a casual meeting or under circumstances in which proof, such 
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as documentation of the medical test results, is not readily available. Clearly, a 
readily accessible registry that shows proof of recent negative test results for 
sexually transmitted diseases (STDs) for each partner would greatly reduce the 
risk of contracting such diseases from a sexual liaison, and the assurance provided 
5 by enabling the other prospective partner to access this proof would certainly 
reduce the concerns of both prospective partners for incurring such risks. 

The Internet has become a freely and widely accessible site for all types of 
information and would provide an ideal medium to enable medical test results to 
be readily accessed by a party who has been tested and has authorized the test 

10 results to be recorded in an accessible registry. The registry in which such test 
results are stored could be accessed through any computer or other computing 
device that is coupled to the Internet, from virtually any place in the world. 
Alternatively, the registry could be accessed by telephone. The only other 
requirements for such a registry to serve the intended function would be that the 

15 access to an individual's test results be securely limited only to the person who 
was tested and to others provided access by that person, and that the party who 
was tested be unable to modify the test results that are posted, other than to delete 
the results. Clearly, it is very important that the other prospective sexual partner 
be able to rely upon the results of such medical tests to the extent that the tests 

20 were properly carried out by a certified testing agency. 

The ability to access the results of tests for STDs in an accessible registry 
would not mean that partners engaging in sex should do so without taking other 
protective measures, such as using condoms. In fact, it would be desirable to 
provide education about safe sex practices at the same site as the registry in which 

25 the test results are stored and accessed in order to encourage individual awareness 
of risks, and responsibility and safety in dealing with STDs. The registry site 
might thus include information of a socially conscious nature or provide links to 
information concerning the practice of safe sex, in addition to providing the test 
results for assuring a prospective sexual partner that the other prospective partner 

30 was tested and found to be free of STDs, of at least a life threatening or incurable 
type. 

It would also be desirable to employ a registry accessible over the Internet 
(or other public network, including the public telephone network) at which test 
results for other types of medical tests could be stored and accessed by the person 
35 tested and/or by authorized medical personnel. While many other types of test 
results could be accessed on such a site, examples of such tests would be those 
carried out to measure blood glucose (for diabetes), or to measure protimes (for 
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blood clotting factor), troponin (cardiac function), myoglobin (cardiac function), 
or creatinine (for renal function). Use of a registry to store these results would 
minimize paper work and reduce errors in reporting the results. 

Also it would be desirable to store the results of home medical tests at an 
5 Internet registry site, so that both the individual being tested and that person's 
physician are able to access the results. In connection with home testing, it would 
be preferable to provide an interface between an automated test apparatus 
designed to carry out the test and the individual's computer to process the test 
results and transmit them to the registry for storage. For example, the test 
10 apparatus might couple to the person's computer through a universal serial bus 
(USB) port or through a serial or parallel port. Some tests require that a relatively 
complex analysis be performed to determine the level of a substance m the 
person's blood or other bodily fluids or in bodily samples (e.g., serum, plasma, 
urine, saliva, hair, etc.), and such tests are more readily carried out by a personal 
15 computer. The results could then be automatically transmitted to the reg.stry site 
for storage and access by the person's physician or for use in prescribing 
appropriate drugs, therapy, or prophylactic measures. Alternatively, the test data 
could be analyzed by the registry site or its affiliated laboratory(ies) and the 
results made available on the registry site for access by the subscriber or other 
20 individual authorized by the subscriber. 

Another possible application of this invention is a registry site that is 
directed to securely storing the results of testing for recreational and illicit drugs 
(e.g., marijuana, cocaine, opiates, phencylidine, amphetamines, barbiturates, 
benzodiazepines, methadone, propoxyphene and alcohol). Such a site could be 
25 used, for example, by employers and employees or prospective employees where 
such testing is a requirement of employment, i.e., in law enforcement, judical and 
drug rehabilitation settings, or in the required testing of athletes. 

Accordingly, it will be apparent that providing a site, which is secure, for 
storing medical test results accessible over a network (such as the Internet) has 
30 many desirable applications. Currently, no such site is available that both 
provides evidence of the identity of the individual tested and also enables the 

secure access of test results. 

Summary of the Invention 

In accord with the present invention, a method is defined for registering 

35 the results of a medical test performed on a subscriber so that the results are 

accessible only to authorized parties over a communication network and can serve 

as evidence of a medical condition of the subscriber. The method includes the 
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step of receiving the results of the medical test of the subscriber from a testing 
agency that performed the medical test, along with an indicia of an identity of the 
subscriber. Note that for purposes of this specification and of the claims that 
follow, the terms "testing agency", "testing lab" and "test lab" refer to a facility 
5 where blood, other bodily fluid or a bodily sample is collected, together with a 
facility where the actual testing/analysis is performed. The collection facility and 
the testing/analysis facility may be located at the same site or at different sites. 
The results of the medical test of the subscriber are stored at a registry site 
provided by a subscription service. The subscriber is readily able to access the 
10 results of the medical test and the indicia of the identity of the subscriber at the 
registry site over the communication network to provide evidence to another party 
of the medical condition of the subscriber, based upon the results of the medical 
test. 

In one preferred application of the present invention, the medical test is 

15 preferably a test for a STD, and more preferably, a potentially life-threatening or 
currently incurable STD. Also, in this preferred application, the other party is 
likely to be a prospective sexual partner of the subscriber. To ensure the security 
of the medical test results, the subscriber is preferably provided with an access 
code including a user name and a password that must be supplied to gain access to 

20 the results of the medical test stored at the registry site. 

The method also preferably includes the step of requiring the subscriber to 
authorize transmittal of the results of the medical test from the testing agency to 
the registry site prior to and as a condition to the step of receiving the results from 
the testing agency. Once the testing agency is authorized to do so, it 

25 electronically transmits the results of the medical test to the registry site. 

A history of the results from medical tests performed on the subscriber at 
different times will also be maintained at the registry site. This testing history will 
likely include a date at which each medical test was performed, and can be 
accessed only by authorized parties, e.g., the subscriber. 

30 The subscription service optionally charges the subscriber a fee for 

providing access by the subscriber to the results of the medical test at the registry 
site and/or may charge a fee for receiving and storing the results of the medical 
test. 

A link on the registry site can be provided to a different site (maintained 
35 by another party) that provides information of potential interest to the subscriber. 
A fee can then be charged to the other party in regard to the subscriber accessing 
the different site via the link on the registry site of the subscription service. 
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It is also contemplated that the registry site provided by the subscription 
service will display advertising and charge a fee for displaying the advertising. 

The subscriber will optionally be able to access the results of the medical 
test via an electronic data communication link to the registry site. As used herein 
5 and in the claims that follow, the terms "electronic data communication", 
"communication network" and "communication channel" are intended to 
encompass all forms of wired and wireless communication, including but not 
limited to, communication between computing devices over local and wide area 
networks, communication using all types of network access devices, telephones, 
10 facsimile machines, and all other forms of electrical and electronic 
communication between disparate sites. 

In one embodiment, the subscription service will specify the testing 
agency that will provide the medical test of the subscriber and will receive a 
portion of a fee charged to the subscriber by the testing agency for carrying out 
15 the medical test. Optionally, the testing agency will provide a discount to the 
subscriber for using the testing agency that was specified by the subscription 
service. 

The subscriber will be able to delete the entire history of the results of the 
subscriber's medical tests from the registry site. In addition, the subscriber will be 
20 able to determine who will have access to the results of the medical test stored at 
the registry site. The subscriber can also limit access of a guest to specific parts of 
the data of the subscriber that are stored at the registry site. 

Another aspect of the present invention is directed to a system for enabling 
limited access to results of a medical test performed on a subscriber so that the 
25 results are accessible only to authorized parties over the electronic communication 
network and can serve as evidence of a medical condition of the subscriber. The 
system includes a server that stores the results of the medical test and makes the 
results available to the authorized parties in a manner generally consistent with the 
steps of the method described above. 
30 Brief Description of the Drawing Figures 

The foregoing aspects and many of the attendant advantages of this 
invention will become more readily appreciated as the same becomes better 
understood by reference to the following detailed description, when taken in 
conjunction with the accompanying drawings, wherein: 
35 FIGURE 1 is a schematic diagram of the components of the present 

invention; 
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FIGURE 2 is an overview flow chart showing the steps implemented in 
the present invention; 

FIGURE 3 is a flow chart showing the steps implemented in an online 
registration of a subscriber in the present invention; 
5 FIGURE 4 is a flow chart showing the steps implemented in a mail or 

phone registration of a subscriber in the present invention; 

FIGURE 5 is a flow chart showing the steps implemented when a 
subscriber registers at a kiosk; 

FIGURE 6 is a flow chart showing the steps for verifying identity of the 
10 subscriber with a driver's license; 

FIGURE 7 is a flow chart showing the steps involved in taking a digital 
photograph of a subscriber to prove identity; 

FIGURE 8 is a flow chart listing the steps for automatic posting of test 
results by a laboratory; 
15 FIGURE 9 is a flow chart showing the steps involved when a subscriber 

reviews the test results and then decides to post them on the site; 

FIGURE 10 is a flow chart showing the steps taken to manually post the 
test results on the web site; and 

FIGURE 1 1 is a block diagram showing principle functional components 
20 of a personal computer suitable for implementing the present invention. 

Description of the Preferred Embodiment 
The present invention makes use of an Internet web site that will serve as a 
clearing house or registry for STD test results. Registration of a domain name for 
such a site has already been secured and is InformedPartner.com. This web site 
25 will provide subscribers secure access to personal information of a very sensitive 
nature, and will therefore implement extremely high standards of security to 
ensure that the information is not accessible by unauthorized parties and is not 
changed to alter the results of a medical test performed on a subscriber. Because 
the service is only available to subscribers who have registered with the web site, 
30 the following discussion and the claims that follow refer to this web site as a 
"registry site." 

Subscribers registering for the service provided by this registry site will 
have the option of having their STD test results posted to the registry site, along 
with an independent verification of the subscriber's identity, which is referred to 
35 in the claims that follow as "an indicia of the identity of the subscriber." In 
addition, the subscriber can also post test results that are not associated with 
verification of the subscriber's identity. In this case, the registry site will simply 
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provide a repository for such data, creating a historical database of medical test 
results that may be of benefit to the subscriber, and will indicate, in connection 
with such data, that the identity of the individual tested has NOT been verified. 
However, the primary purpose of the service provided to the subscriber by the 
registry site is to enable proof of a medical condition to be presented to a 
prospective sexual partner of the subscriber based upon the results of one or more 
medical tests that were performed on the subscriber by a testing laboratory 
affiliated with the registry site. The subscriber's personal information is securely 
accessible only by authorized parties via an Internet or other electronic 
communication connection. Results of a medical test and other personal data of 
the subscriber can be accessed and displayed to the subscriber or to any other 
party who has previously been authorized by the subscriber to have access to data 
of the subscriber by entering a correct user name (and/or a customer ID number 
(ID) assigned to the subscriber) and the correct password. The subscriber will 
choose or be assigned a unique password, and will choose or be assigned a unique 
guest password and/or guest ID number for each specific other party authorized 
by the subscriber to access a selected portion of the subscriber's personal data. 
Thus the subscriber can set access rights that limit the specific data of the 
subscriber that can be accessed by another party, based upon the password and/or 
20 guest ID number entered by the other party, which the subscriber will provide to 
the other party. A guest permission may optionally be valid for a single use only. 
Once a guest uses the credentials (the guest ID number and/or guest password) to 
access the subscriber's data, those credentials will expire, making it impossible for 
that guest or anyone else not so authorized to access the information on the web 
25 site 

Data maintained by the registry site will include personal identification 
information for each subscriber, a record of the types of medical tests performed 
on the subscriber, a test date, and test results, all of which will be associated with 
the customer ID originally assigned to the consumer. This information will be 
30 delivered in a format that is appropriate for display on a variety of different types 
of Internet or electronic communication access instruments. 

In FIGURE 1, a system diagram illustrates various components of a 
preferred system for implementing the present invention, including maintenance 
of data at the registry site, and providing access of that data by a subscriber (or by 
35 another party authorized by the subscriber). Currently, it is likely that, m most 
cases a subscriber will connect to the registry site using a personal computer 
(PC) 20 on which a browser program is executed. Examples of suitable browsing 
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programs for execution on PC 20 include Microsoft Corporation's INTERNET 
EXPLORER™, and Netscape Corporation's NAVIGATOR™ browser programs. 
However, it is also contemplated that other devices, such as a personal digital 
assistant (PDA) 22 or a cell phone 24 that are Internet access enabled, can 
5 alternatively be used to access medical test results and other personal information 
of a subscriber that are maintained at the registry site. An appropriate format for 
the data maintained at the registry site will be provided for the specific Internet or 
electronic communication device employed to access the data. Thus, PC 20 can 
access data displayed using the full browser graphic user interface, while only a 

10 textual representation of the data will be displayed on cell phone 24. Details such 
as the type of Internet access employed by a subscriber, e.g., access over 
conventional telephone lines using a modem, a cable modem, a high-speed digital 
subscriber line, or satellite access of Internet 28 are not illustrated in FIGURE 1, 
since these details are not pertinent to the present invention. However, as is 

15 evidenced by the inclusion of PDA 22 and cell phone 24, it is contemplated that 
various types of wired and wireless connections with Internet 28 can be used for 
electronic data communication with the registry site at which the test results of a 
subscriber are maintained. 

A consumer wishing to subscribe to the service provided by a registry 

20 site 30 can initially contact the registry site (to register as a subscriber to the 
service) over Internet 28 using PC 20, PDA 22, or cell phone 24, or may call the 
registry site by telephone, or by mail, email, or facsimile transmission. 
Alternatively, a consumer wishing to subscribe to the service may first become 
aware of it when exposed to advertising associated with an information kiosk 26 

25 or when the consumer visits a testing lab to be tested for a STD. Each of the 
testing labs affiliated with the registry site will include one or more testing lab 
kiosks 32 that are connected to the registry site over Internet 28. It is 
contemplated that information kiosks 26 will be provided in places such as singles 
bars, which consumers having an interest in becoming a subscriber to the service 

30 provided by the registry site are likely to frequent and in which they are likely to 
meet prospective sexual partners. The information kiosk or testing lab kiosk can 
thus provide a connection to the registry site enabling a consumer to become a 
subscriber of the service. Alternatively, these kiosks can be used to connect to the 
registry site for access of the test results of a subscriber. Thus, in singles bars and 

35 other locations where people may meet others with whom they would be 
interested in having a sexual liaison, the information kiosks can be employed to 
provide evidence of a subscriber's medical condition, thereby enabling the 
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subscriber to provide proof that when last tested for a STD, the results of the test 
were as asserted by the subscriber. Clearly, in most instances, both prospective 
sexual partners will preferably be subscribers, so that each can provide the proof 
of the medical condition that the other prospective partner would prefer. 
5 Revenue Model for Registry Site 

As illustrated in FIGURE 1, Internet 28 is the most likely channel for a 
subscriber (or a consumer who wants to register as a subscriber) to access registry 
site 30 Before making use of the services provided by registry site 30, a 
consumer must register and thereby become a subscriber; and details of the 
10 registration process are discussed below. It is contemplated that a monthly or 
annual subscription fee will be charged to a subscriber for providing the services 
explained herein. In addition to paying a periodic subscription fee, each 
subscriber will likely be charged each time that test results of medical tests 
performed on the subscriber are transferred to the registry site for storage, and a 
15 smaller charge may be incurred each time that the subscriber's personal data and 
test results are accessed over Internet 28. It is also contemplated that the registry 
site will display links to other web sites that provide information of possible 
interest to subscribers. For example, a link might be provided to a web site that 
sells birth control-related products, or a link might be provided to a site that 
20 discusses newly developed treatments for STDs. The registry site may impose a 
charge to the other web site each time that the link to the other web site is 
activated, or may charge a fixed fee for simply including the link. In addition, the 
registry site will likely display banner ads and other advertising components for 
web sites run by others. Typical fees for displaying such advertising at the 
25 registry site will be charged to those who are advertising in this manner. 

Another source of revenue for the registry site will derive from the registry 
site specifying the testing labs that are affiliated with the registry site. A portion 
of the medical test fee charged by such a testing lab will then be received by the 
operators of the registry site. Since the service of the registry site is at least 
30 national, and more likely, will become international, the testing labs required to 
service all of the subscribers of the registry site will be distributed all over the 
country, and possibly, in all major countries of the world. Optionally, the testing 
labs may provide a discount to subscribers of the registry site, recognizing that the 
increased volume arising from the referral provided by the registry site will more 
35 than compensate the testing lab for the portion of the fee returned to the registry 
site and any discount provided the subscribers of the registry site. 
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Secure Access of Subscriber Data 

A key aspect of the service provided by registry site 30 is the security with 
which the personal information of each subscriber is maintained. The security of 
this personal information and the test result data is protected by requiring that 
5 each subscriber enter a user name and unique password before being allowed 
access to the data of the subscriber. In addition, each subscriber is provided with, 
or can specify, a guest or partner ID number and/or password that must be entered 
to enable the guest to gain access to that portion of the subscriber's personal 
information and test results to which the subscriber has authorized access. The 

10 subscriber controls the access to this data and information by setting permissions 
for each specific unique guest or partner ID number. Such permissions will 
enable the subscriber to determine the information displayed to the guest and the 
protection level provided. For example, the subscriber can specify whether: (1) 
the guest requires a guest ID number and a secondary password; (2) the guest is 

15 permitted to view only a particular type of test (e.g., a test for STD, but not for 
drugs); and, (3) the guest ID number and/or password is valid for only a single use 
or for multiple accesses of the subscriber's information and test results. The guest 
ID numbers are not sequential, but instead are randomly generated to prevent 
someone from "guessing" a more current guest ID, based on a previous guest ID. 

20 The web site may optionally include a Digital Certification, providing a 

verifiable form of identification that the web site being accessed is, in fact, the 
true registry site, or the web site can provide other means to prove its authenticity 
as the registry site. For example, the registry site may enable a prospective 
partner, who also is a subscriber of the registry site, to access his or her test data, 

25 using his or her customer ID and/or password, directly from the subscriber's 
displayed information, to mitigate the risk that inaccurate or fraudulent test results 
posted on a fraudulent site can be displayed to an unwitting prospective partner. 
To mitigate the possibility of a third party accessing a subscriber's displayed test 
results without the permission of the subscriber, the browser may be set to refresh 

30 after a short period of time and then automatically display a non-confidential page 
within the registry site (e.g., a guest login page). All web-based communications 
accessing personal information and data of a subscriber that are maintained on 
registry site 30 will be via a secure socket layer (SSL) encrypted Internet 
connection to registry site 30 and will be through a firewall 34. Firewall 34 

35 isolates the sensitive information of the subscribers, preventing unauthorized 
access by third parties. Communications through firewall 34 from Internet 28 are 
connected to a load balancer 36, which distributes the Internet traffic generally 
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equally between a plurality of web servers 38a through 38d, thereby minimizing 
delays by subscribers and authorized guests in accessing the personal information 
and test result data. Firewall 34 also restricts access to the web services of each of 
these web servers and ensures that no outside traffic can directly reach the web 



servers. 



Application servers 40a and 40b form a middle tier in the architecture of 
registry site 30 and are isolated from the Internet by both firewall 34 and load 
balancer 36. Only an application running on the application servers can enable 
access by authorized parties to data of the subscribers maintained on a database 
10 server 4^ The business logic for the web based application that enables 
subscribers to access their individual test results and other personal information 
are hosted by the application servers. Also, the application servers generate 
dynamic content based on data extracted from the database maintained on 
database server 42. Any incoming queries from web servers 38a through 38d are 
15 dispatched to the application servers, which perform appropriate queries of the 
data extracting the requested information once all requirements for secure access 
have been met. Also, the application servers format the returned data in a form 
appropriate for the client Internet access device that has queried registry site 30, 
so that the form is appropriate and can readily be rendered on the PC, PDA, cell 
20 phone, or other Internet or electronic access device being used by the subscriber. 
The output produced from a query of database server 42 will be returned to the 
web server that requested it, under the control of the application running on one of 

the application servers. 

Another key aspect in maintaining the integrity and security of test result 
25 data will be the use of a virtual private network (VPN) 60, which is connected to 
each affiliated testing lab work station 58. Several different approaches are 
contemplated for entry of test results into database server 42. One preferred 
approach is to completely automate the process of reading the test results from 
medical tests performed on subscribers and to automatically batch load the test 
30 results into the data at registry site 30 over VPN 60, so that no human intervention 
is required for transcribing the test results. Automating this process should 
minimize the risks of inadvertently introducing an error in the results reported and 
stored for any subscriber. Alternatively, test results from medical tests of 
subscribers can be entered in an appropriate form at testing lab work station 58, by 
35 trained personnel at the testing lab. It is highly preferred that no personnel at 
registry site 30 be involved in the processing of test results or entry of the test 
results into the data maintained on database server 42. By limiting human 
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interaction in the process only to personnel at the testing lab, any liability of the 
registry site for error in the result or in the performance of the medical test, or in 
the entry of the test results into the data will be avoided by the registry site. 
Transmission of the test results over VPN 60 in an encrypted form (either as an 
5 automated batch load or as manual transcription entries on a form) will ensure that 
the results cannot be intercepted by a third party. Also, since application 
servers 40a and 40b interact with testing lab work station 58 for providing entry 
and transmission of the test results into the database maintained on database 
server 42, they will provide an automated verification of the receipt of the test 

10 results by the registry site to the testing lab that submitted the test results. 

Strict administrative controls will be enforced on the security of the 
application and application servers hosting the application that enable access to 
the subscriber data. All subscriber data contained within database server 42 of a 
sensitive nature will be encrypted and only accessible by administrator level 

15 personnel at the registry site, who because of the encrypted form of the data, will 
be unable to directly display and read sensitive information of the subscribers 
contained in the data. 

Additional support systems 44 will likely be provided to facilitate the 
management and administration of registry site 30. Examples of these support 

20 systems include a report server 46, an email server 48, an advertising server 50, an 
administration server 52, a billing server 54, and a system monitor 56. Other 
support systems will be provided as necessary to administer and manage the 
operation of the business of the registry site relating to servicing the needs of 
subscribers and controlling access to the sensitive data maintained on database 

25 server 42. 

When the lab has posted the test results for a subscriber to the registry site 
for inclusion in the data maintained there, the subscriber can be notified either by 
email, by facsimile transmission, or by a phone call (made by the system in an 
automated fashion) to inform the subscriber that the test results have been 

30 uploaded automatically or manually to the registry site and can be accessed by the 
subscriber. These test results can then be checked by the subscriber. Preferably, 
the subscriber will not be able to selectively withhold the display of test results 
from a similar group of test results once said test results have been transmitted to 
the registry without terminating his or her subscription to the registry, thereby 

35 expunging the subscriber's testing data history and invalidating further use of the 
subscriber's primary username and password. In the event that the subscriber 
arranges for test results for drug use and test results for STDs to be stored at the 
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registry site, it is contemplated that the subscriber will be enabled to select the 
type of test results (i.e., drug use test results or STD test results, in this example) 
to be included among the data that a guest or prospective partner of the subscriber 
can access to verify the medical condition of the subscriber based upon the results 
5 of the lab tests. It is contemplated that automatic notifications of the subscriber by 
email or facsimile transmission, informing the subscriber that the test results are 
available on the registry site, can be customized by a particular testing lab to 
comply with specific trademark branding needs of the testing lab, but will not 
contain any personal information or the actual test results, as such messages will 
1 0 be transmitted through unsecured channels and might be accessed by third parties. 
When the registry site receives the test results from the testing lab, an automated 
verification email message will be transmitted to the testing lab from the registry 
site, providing proof that the registry site has received those results from the 
testing lab. Alternatively, the registry site may generate automatic notification of 
1 5 the subscriber that test results are available for review on the registry site. 

As an alternative to automated uploading of test results to the registry site, 
subscribers may elect to have the test results forwarded to them from the testing 
lab in a more traditional fashion, i.e., by personal mail, or over the telephone. 
Once the subscriber has received and reviewed the test results, the subscriber can 
20 at that time, request that the testing lab post the results to the registry site. Only 
after receiving permission from the subscriber would the testing lab forward the 
results of the tests, along with validated identification information for the 
subscriber, to serve as proof of the subscriber's identity when the test results are 
accessed at the registry site, by a guest or prospective partner. 
25 It is also contemplated that the subscriber may choose to use one or more 

kits to carry out medical testing at home, or may elect to have medical tests 
performed by a non-affiliated testing lab. Also, some home test kits must be 
mailed into a testing lab for determination of the results of the tests. A subscriber 
will have the option of manually posting such tests to the registry site. However, 
30 test results that are manually posted and not provided by an affiliated testing lab 
which has not drawn the test sample from a subscriber whose identity has been 
verified will not have the benefit of a validation of the subscriber's identity, and 
thus will be unable to serve as proof of the subscriber's medical condition. Any 
guest or prospective sexual partner accessing results that are posted without 
35 benefit of the validation of the subscriber's identity will be clearly warned in the 
display of the results that the registry site is posting the results as a service to the 
subscriber, but without proof of the subscriber's identity. The guest will thus be 
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alerted that the test results do not serve as evidence of the subscriber's medical 
condition, since they might be fictitious, or may be for a person other than the 
actual subscriber. 

One of the benefits of enabling the subscriber to post medical test results 
5 from sources other than an affiliated testing lab and without a proof of identity is 
to maintain a history of the tests that can be readily accessed by the subscriber. In 
addition, posting of such test results may be beneficial in facilitating discussions 
between the subscriber and the subscriber's physician, since it is possible that both 
the subscriber and the physician can simultaneously access the test results 

10 (assuming that the subscriber has provided permission and a guest password 
and/or guest ID number to the physician to access the results). 
Summary of Procedures Used in Present Invention 

FIGURE 2 illustrates the steps involved in the overall use of the registry 
site for registering subscribers and for receiving, posting, and enabling access of 

15 test results that serve as proof of a medical condition of the subscriber. Following 
a start block, a block 100 indicates that a consumer registers as a subscriber with 
the registry site (e.g., InformedPartner.com). As part of the registration process, 
the subscriber may optionally be required to provide an indicia of identification 
(e.g., a digital copy of a passport photograph or a valid driver's license), although, 

20 it will be more likely that the indicia of identification will be required simply to 
confirm the identity of the subscriber for purposes of payment by a credit or debit 
card, or by other non-cash means. As noted above, the registration can be 
accomplished over a variety of different types of devices that can access the 
registry site over the Internet, including information kiosk 26, and testing lab 

25 kiosk 32. By registering with the registry site, the subscriber agrees to be 
financially liable for the subscription fee and for any other fees associated with the 
subscriber's use of the registry site. As noted above, such fees may include a fee 
charged each time that the personal information and data of the subscriber are 
accessed, and a fee charged each time that medical test results are posted to the 

30 registry site. In a block 102, the subscriber visits an affiliated testing lab, having 
arranged for the testing lab to draw a sample in order to carry out the test 
requested by the subscriber. It is possible that the appointment for visiting the 
testing lab will be made from the registry site, but can alternatively be made over 
the telephone or during a previous visit to the testing lab. For the purposes of this 

35 exemplary application of this invention, the medical tests will likely be for STDs, 
and more likely, be limited to potentially life threatening or currently incurable 
kinds of STDs. 
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Examples of the types of tests that might be made for potentially life- 
threatening or currently incurable STDs include the Elisa immunoassay (EI A), the 
Western blot or other confirmatory test for HIV; the hepatitis B surface antigen 
and hepatitis C antibody tests; and the Herpes simplex virus type 2 (HSV 2)- 
5 specific serology test. Additional tests for curable sexually transmissible diseases 
may be included, such as culture, ligase chain reaction (LCR) and polymerase 
chain reaction (PCR) tests for chlamydia trachomatis and neisseria gonorrhoeae; 
rapid plasma reagin (RPR), Venereal Disease Research Laboratories (VDRL) or 
other confirmatory test for syphilis; and tests for Epstein-Barr virus (EBV), 
10 cytomegalovirus (CMV) and varicella-zoster virus (VZV). Of course, many other 
types of tests may be carried out within the scope of the present invention, 
including those for other types of medical conditions that are not sexually 
transmitted and/or are tests for diseases or medical conditions that are not 
incurable or potentially life threatening. 
15 In a block 1 04, the lab draws a sample from the subscriber and at that time, 

verifies the identity of the subscriber. Verification of the identity of the subscriber 
can be based upon presentation by the subscriber of any kind of legally acceptable 
picture identification, such as a driver's license, passport, or other common legally 
accepted indicia of identification. However, in most cases, it is expected that a 
subscriber will present a driver's license with a picture as proof of his or her 
identity. The testing lab also may access (e.g., only at an access level necessary 
for interaction with medical testing lab providers) the subscriber's identification 
information on the registry site to match the presented indicia of identification to 
that on the registry site, if such identification information was provided previously 
by the subscriber to the registry site. A block 106 indicates that the subscriber 
provides to the testing lab the customer ID that was obtained from the registry 
site, so that the customer ID can be associated with the test results and with the 
subscriber identification data. Optionally, such customer ID can be verified by 
the testing lab by accessing the registry site. Although various types of 
30 identification data are contemplated, the simplest verification data for the 
subscriber's identification is the driver's license number of the subscriber. 

In a block 108, the testing lab records the customer ID and the ID 
verification in association with the lab test, on the request form. In a block 1 10, 
the lab completes the medical tests requested by the subscriber, obtaining results 
35 that are then posted (automatically or manually) to the registry site, along with the 
customer ID and identification verification data, as indicated in a block 112. As 
noted above, it is also contemplated that the subscriber may alternatively choose 
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to receive and verify the test results before requesting that the testing lab post 
them to the registry site. 

A block 1 14 indicates that the testing lab or registry site notifies the 
subscriber that the test results have been posted to the registry site. The 

5 notification can be automated, as described above. The subscriber verifies the lab 
results and the personal information on the registry site, typically using a browser 
to access the information. Of course, the results of the test can only be accessed 
by the subscriber after the subscriber enters the user name and password 
previously assigned to the subscriber. In addition, a block 116 provides for the 

10 subscriber to set the guest access rights, specifically defining the data of the 
subscriber that will be accessible to a guest or prospective sexual partner. 
Preferably, the subscriber will be unable to deny a guest or prospective partner 
access to selected test results contained in the subscriber's testing history, other 
than by type of test results, as noted above. Thus, for example, a subscriber will 

15 not be allowed to authorize access to only a portion of STD test results for the 
subscriber, but will be allowed to authorize access by a guest to only all of the 
subscriber's STD test results, while excluding access by the guest to the 
subscriber's drug use test results, or vice versa. 

Typically at some later point in time, the subscriber will interact with a 

20 potential sexual partner. In order to show proof of a medical condition satisfying 
the prospective sexual partner, the subscriber will provide the prospective partner 
with the guest password/and or guest ID number and customer ID for the 
subscriber as indicated in a block 118. As noted in a block 120, the prospective 
sexual partner can then access the authorized data of the subscriber on the registry 

25 site using the guest password and/or guest ID number, and customer ID of the 
subscriber. A block 122 indicates that the guest or prospective partner reviews the 
subscriber's test results and verifies the person's (subscriber's) identity against the 
identification verification data included with the test result data of the subscriber 
on the registry site. Assuming that the identification verification data confirm that 

30 the identity of the subscriber who was tested is that of the person asserting a 
medical condition, the prospective partner will at least be assured that, at the time 
of the medical test, the results shown at the registry site were valid. Naturally, 
such test results may no longer be applicable. The longer the time interval 
between the current date and the date of the medical tests, the less assured a 

35 prospective partner will be by viewing the test results of a subscriber. For this 
reason, it is likely that subscribers will be tested more frequently than they would 
otherwise, which should help (statistically) in detecting any STD-infected 
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subscribers at an earlier time than would otherwise be the case. Also, the registry 
site will provide educational content directed to STDs, including epidemiology, 
clinical manifestations, diagnosis, treatment, and references to or copies of the 
most recent scientific literature relating to topics of potential interest to the 
5 subscriber, and will make very clear that subscribers and guests are encouraged to 
practice safe sexual procedures to minimize the risk of infection from any type of 
STD. 

An alternative embodiment of the present invention is directed to a registry 
site that is intended to be accessed telephonically. The subscriber would access 
10 the registry site via a telephone access number and enter his or her customer ID 
and password through an alpha-numeric keypad. The subscriber also could 
provide a guest or prospective partner with the subscriber's customer ID and a 
guest password and/or ID number that, through similar use of an alpha-numeric 
keypad, would allow access to the subscriber's information on the registry. The 
1 5 guest or prospective partner then would be allowed to hear an automated listing of 
the subscriber's testing history. The automated response would include the 
subscriber's driver's license number or other identifying information that could be 
matched against the corresponding information presented by and identifying the 
party claiming to be the subscriber. If the two parties are located together when 
20 the registry is accessed telephonically and the guest or prospective partner also is 
a subscriber (i.e., a "partner subscriber") to the registry site, the partner subscriber, 
without terminating the call and redialing, would enter his or her customer ID and 
password, thereby accessing the partner subscriber's testing history and verifying 
that the automated response previously heard was, indeed, generated by the 
25 registry site and was not a fraudulent automated recording from some other 
source. The partner subscriber then could allow the subscriber to hear the 
automated listing of the partner subscriber's testing history and identifying 
information. 

Details of Registering as a Subscriber 

30 Further details of the steps taken by a consumer to register with the 

registry site as a subscriber are illustrated in FIGURES 3 through 5. These 
Figures illustrate three different approaches that can be used. FIGURE 3 shows 
the steps involved in registering with the registry site over the Internet, beginning 
with a block 150. In a block 152, a consumer who is considering becoming a 

35 subscriber to the service offered by the registry site accesses the site using a web 
browser. In a block 154, the consumer selects a registration option provided on a 
web page of the registry site in order to subscribe to the service. Having selected 
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this option, a block 156 indicates that the subscriber is queried to provide personal 
information, e.g., by displaying a registration form in the consumer's browser. 
Such information may include birth date, gender, mailing address, phone number, 
email address, etc. The subscriber then selects a primary user name and 
5 password, as indicated in a block 158. In addition, as noted in a block 160, the 
subscriber selects a guest password and/or guest ID number and sets the 
associated guest access rights. In many cases, the subscriber may not choose to 
disclose all test results to a guest, but may limit the data accessible to the guest to 
the results of a most recent test for STDs. Preferably, the subscriber will be 

10 unable to deny a guest or prospective partner access to selected test results from 
the subscriber's testing history for a particular type of test, e.g., access to only a 
portion of the STD test results. 

A block 162 provides that the subscriber selects the subscription option 
and provides a payment method, which will typically be a credit card. The 

15 information typically required for accepting payment by credit card will be 
provided by the subscriber at this time, including the type of credit card, card 
number, expiration date of the card, billing address, etc. It is also contemplated 
that other forms of payment can be provided, including payment by debit card, 
and by other financial instruments, including personal check. Once this 

20 information has been entered at the registry site over a SSL connection, a 
block 164 indicates that the subscriber is assigned a unique customer ID, which is 
provided to the subscriber for use in referencing the subscriber's personal 
information and test results on the registry site. 

Alternatively, a consumer may elect to register with the registry site over 

25 the phone as indicated in a block 170. If so, a block 172 provides that the 
consumer phones the customer service department for the registry site. In a 
block 174, a customer service representative answering this telephone call collects 
the personal information from the consumer and describes the subscription 
offerings to the consumer, answering any other questions the consumer may have. 

30 In a block 176, the consumer selects the subscription option and chooses a 
payment method. Again, the various conventional ways of providing payment to 
the registry site for the services rendered will include credit or debit cards and 
other financial instruments. In a block 178, the subscriber selects a primary user 
name and password, while in a. block 180, the subscriber chooses a guest 

35 password and/or guest ID number and sets the associated access rights for a guest. 
Finally, in a block 182, the subscriber is assigned a unique customer ID number 
that is given to the customer over the telephone. 
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FIGURE 5 illustrates steps that are similar to those in FIGURE 3, except 
that as indicated in a block 190, the consumer initiates the registration from a 
testing lab kiosk (or from an information kiosk that might be found in locations 
likely frequented by those interested in the services provided by the registry site). 
5 A block 1 92 provides that, in this case, the consumer visits the testing lab, perhaps 
already having arranged for a test to be made for one or more STDs without 
knowledge of or direction from the registry site. While making the visit, the 
consumer may learn that the services offered by the registry site are available and 
will then use the kiosk to access the registry site. In a block 194, the consumer 
10 again selects the registration option provided on the homepage of the registry site 
in order to subscribe to the services offered. Remaining blocks 196 through 204, 
respectively, in FIGURE 5, correspond to blocks 156 through 164 in FIGURE 3. 
Verification of Subscribe r Identification 

FIGURES 6 and 7 illustrate two alternative methods for verifying the 
1 5 subscriber's identification - both at the time the subscriber appears at the testing 
lab to "be tested," and later, when the test results are accessed by a guest or 
prospective sexual partner on the registry site. In regard to FIGURE 6, the 
procedure begins with a block 210 in which the subscriber's driver's license (or 
other indicia of identification) is used as a basis for verifying identity. 
20 Accordingly, in a block 212 the testing lab reviews the subscriber's driver's 
license to confirm that the picture shown there corresponds to the appearance of 
the person from whom the test sample is drawn. In addition, the testing lab may 
access (but preferably only at an access level necessary for interaction with 
medical testing providers) the subscriber's identification information on the 
25 registry site to confirm that the subscriber's identification matches that of the 
individual undergoing the test. Based upon a determination that the person 
appears to be the individual identified by the driver's license (and matches the 
indicia of identification on the registry site, if accessed), a block 214 indicates that 
the testing lab records the driver's license number in association with the test 
30 ordered by the subscriber for STDs (or other type of test). Preferably, the 
recorded indicia of identification accompany the test sample electronically 
throughout the sample's testing process. According to a block 216, the testing lab 
then draws a sample from the subscriber whose identification has been confirmed, 
and completes the test using standard testing procedures. In a block 218, as 
35 previously noted, the subscriber also provides the customer ID, that was obtained 
from the registry site when the subscriber registered, to the testing lab for 
association with the test results. In a block 220, the testing lab records the 
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customer ID and driver's license number for the subscriber with the test results 
obtained upon completing the test or analysis. 

A block 222 provides that an optional further confirmation of the 
verification of the identification can be provided by scanning the image 
5 (photograph) of the subscriber included on the driver's license using a 
conventional scanner. The scanned image can be posted with the test results to 
the registry site and viewed by a guest accessing the test results with the 
permission of the subscriber as further proof confirming the identity of the 
subscriber in connection with the test results. In a block 224, the test results 

10 accessible at the registry site are linked to the driver's license number (and to the 
scanned image of the driver's license submitted by the subscriber, if available). 

An alternative for providing verification of the identification of the 
subscriber is shown in FIGURE 7, beginning with a block 230. In a block 232, 
the testing lab takes a digital photograph of the subscriber using any of the readily 

15 available digital cameras. The digital photograph produced by the camera is 
attached to the test request by the testing lab in a block 234 and, preferably, 
accompanies the sample electronically through the sample's testing process. In a 
block 236, the testing lab draws a sample from the subscriber and completes the 
tests requested by the subscriber in a block 238. When the test results are posted 

20 to the registry site, as indicated in a block 240, the digital photograph is included 
and is associated with the test results. Thus, as provided in a block 242, the test 
results can be viewed on the registry site, linked to the digital photograph. Thus, 
the image of the subscriber is displayed on the registry site in association with the 
test results as proof of the identity of the subscriber, thereby providing evidence to 

25 a guest who has received permission from the subscriber to access the test results 
and the digital photo, of the medical condition asserted by the subscriber, as 
confirmed by the test results. 

It is also contemplated that other types of identification can be employed 
as an alternative to the driver's license number, scanned image of the driver's 

30 license, and digital photograph of the subscriber. For example, biometric data of 
the subscriber may be taken at the time a test sample is drawn from the subscriber 
and included with the test results that are posted at the registry site. Confirmation 
of the identity of the subscriber can then be achieved by a guest accessing the test 
results if the party claiming to be the subscriber has already submitted 

35 corresponding biometric data to the registry site. The registry site can then 
indicate whether the biometric data submitted when the subscriber registered with 
the site matches the biometric data recorded when the subscriber was tested by the 
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testing lab, thereby confirming that the subscriber tested is in fact the party 
asserting the medical condition confirmed by the test results. In addition, the 
biometric data to be compared to that accompanying the test results may be 
submitted in the presence of the guest, thereby further confirming the identity of 
the subscriber who was tested matches that of the party asserting a med.cal 
condition confirmed by the test results. The biometric data may be a retinal scan, 
digital fingerprint scan, facial scan, voice print, etc. Input devices for scanning 
any of these various types of biometric data may eventually be more commonly 
available, making this alternative more practical. 

It is contemplated that in some cases, a subscriber will desire medical 
results to be posted and will permit access by a guest or prospective partner to 
those test results even though the results confirm that the subscriber has tested 
positive for a STD. For example, a prospective partner may have refused a sexual 
liaison with the subscriber because of concern of infecting the subscriber, if the 
15 prospective partner has tested positive for HSV-2. In this case, the prospective 
partner may wish to confirm that the subscriber has also tested positive for 
HSV-2, thereby alleviating, to some extent, the concerns that either may infect the 
other. 

A subscriber will not be able to change the test results that are posted to 
20 the registry site and, preferably, the subscriber will not be able to deny a guest or 
prospective partner access to selected tests from the subscriber's testing history. 
However, at any time, the subscriber may delete or purge his or her entire history 
of medical tests from the registry site's database, terminating his or her 
subscription with the site and invalidating his or her customer ID number. 
95 Further Details of the Process 

Further details of the overall process disclosed in FIGURE 2 are illustrated 
in FIGURES 8 through 10. For example, FIGURE 8 begins with a block 250 in 
which the steps involved in posting the results of a test in an automated fashion 
are carried out by the testing lab. A block 252 provides that the test is completed 
30 to determine the results. In a block 254, the testing lab posts the results of the test 
to the registry site via an SSL encrypted link, through a VPN, ensuring that the 
test results are not intercepted by any third party. If these test results are posted to 
the registry site without intervention of any personnel at the registry site, the 
potential for introducing an error in the posting of the results is minimized. 
35 Although the registry site cannot attest to the accuracy of the test performed by 
the testing lab, the process employed for automatically posting the results of the 
test to the registry site ensures that further errors are not introduced. As indicated 
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in a block 256, the test results will include the consumer account ID, thereby 
relating the test results to a specific subscriber, and a proof of the identity of a 
subscriber, such as the driver's license number, scanned image of the subscriber's 
driver's license, or a digital photograph of the subscriber. 
5 With reference to FIGURE 9, a block 260 begins the alternative process of 

enabling the subscriber to review the test results before they are posted to the 
registry site. In a block 262, the test results are produced by the testing lab as 
requested by the subscriber. A block 264 provides that the testing lab notifies the 
subscriber of the test results, by telephone, mail, or other relatively secure format. 

10 After reviewing the test results, the subscriber has the option of requesting that the 
testing lab post the results to the registry site, as indicated in a block 266. 
Assuming that the subscriber has made such a request, block 268 indicates that the 
testing lab posts the test results to the registry site for access by the subscriber and 
by any guest given permission by the subscriber. Further, as noted in a block 270, 

15 the test results are associated with the consumer account ID provided to the 
subscriber by the registry site and with the verification of the subscriber's identity, 
such as the subscriber's driver's license number, the scanned image of the driver's 
license, or the digital photograph taken of the subscriber. 

FIGURE 10 illustrates the steps taken for manually posting test results to 

20 the registry site, where it is understood that these results do not serve as proof of a 
medical condition, i.e., for purposes of convincing a prospective sexual partner 
that the subscriber was tested or that the asserted medical condition was 
determined by a test of the subscriber. In a block 280, the steps for manually 
posting the test results begin. A block 282 provides that the test results are 

25 produced by a testing lab, but can be based upon a sample submitted by the 
subscriber after using a home test kit, or as a sample from the subscriber 
submitted to a testing lab that is not affiliated with the registry site. In a 
block 284, the testing lab notifies the subscriber of the test results. The subscriber 
then enters the test results on the registry site manually, for example, by making 

30 entries within a browser displayed form provided on the registry site, as indicated 
in a block 286. However, as noted in a block 288, the test results thus entered are 
not associated with any proof of the subscriber's identity, and therefore cannot 
serve as evidence of a medical condition if presented to a guest authorized by the 
subscriber to view the results. 

35 FIGURE 1 1 illustrates basic components of PC 20, which currently is 

likely to be the most commonly used device for connecting to the registry site 
over the Internet. These components include a central processing unit (CPU) 300 
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that is coupled in communication with a memory 302, which includes both read- 
only memory (ROM) and random access memory (RAM). Memory 302 is loaded 
with machine instructions that are typically stored on a hard drive 304 The 
machine instructions, which comprise program modules ^J*""*™ 
components of applications such as a browser are executed by CPU 300. Thus, 
the CPU can execute a browsing program used to access the registry site and to 
view information of a subscriber, including the test results and verification of the 
subscriber's identity. CPU 300 is connected to a display interface 306, which 
drives a display 308, on which the browser displays information obtained by 
access of the registry site. To connect to the registry site, CPU 300 receives and 
transmits data bi-directionally over a network interface 312 in response to 
commands input by the user through user input devices 310, which may mclude a 
keyboard and/or pointer control device (or mouse). Network interface 312 may 
include a modem, or a network interface card that connects to a data 
communication port on a network through which the registry site is accessed over 
the Internet, generally as shown in FIGURE 1 . 

Although the present invention has been described in connection with the 
preferred form of practicing it, those of ordinary skill in the art will understand 
that many modifications can be made thereto within the scope of the claims that 
follow. Accordingly, it is not intended that the scope of the invention in any way 
be limited by the above description, but instead be determined entirely by 
reference to the claims that follow. 
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The invention in which an exclusive right is claimed is defined by the 
following: 

1 . A method for registering results of a medical test on a subscriber so 
that the results are accessible only to authorized parties over a communication 
network, as evidence of a medical condition of the subscriber, comprising the 
steps of: 

(a) receiving the results of the medical test of the subscriber 
from a testing agency that performed the medical test, along with an indicia of an 
identity of the subscriber or verification of the identity of the subscriber; 

(b) storing the results of the medical test of the subscriber at a 
registry site provided by a subscription service; and 

(c) enabling the subscriber and any party authorized by the 
subscriber to access the results of the medical test and the indicia of the identity of 
the subscriber at the registry site over the communication network and thus, to 
provide evidence to said party of the medical condition of the subscriber based 
upon the results of the medical test. 

2. The method of Claim 1, wherein the medical test is a test for a 
sexually transmitted disease and the party authorized by the subscriber is a 
prospective sexual partner of the subscriber. 

3. The method of Claim 1, wherein the medical test is a test for drug use. 

4. The method of Claim 1, wherein the indicia of the identity of the 
subscriber comprises an image of the subscriber. 

5. The method of Claim 1, wherein the indicia of the identity of the 
subscriber comprises a driver's license number of the subscriber. 

6. The method of Claim 1, wherein the step of enabling comprises the 
step of providing the subscriber with an access code that must be supplied to gain 
access to the results of the medical test and the indicia of the identity of the 
subscriber that are stored at the registry site. 

7. The method of Claim 1, further comprising the step of requiring 
the subscriber to authorize transmittal of the results of the medical test from the 
testing agency to the registry site prior to and as a condition to the step of 
receiving the results from the testing agency. 
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8 The method of Claim 1, wherein the step of receiving comprises the 
step of the testing agency transmitting the results of the medical test to the re gl stry 
site. 

9 The method of Claim 1 , further comprising the step of maintaining 
a history of results from medical tests performed on the subscriber at different 
times, said history including a date at which each medical test was performed, for 
access by the authorized parties. 

10 The method of Claim 1, further comprising the step of the 
subscription service charging the subscriber a fee for providing access by the 
subscriber to the results of the medical test at the reg.stry site. 

11 The method of Claim 1, further comprising the step of the 
subscription service charging a fee for receiving and storing the results of the medical 
test. 

1 2 The method of Claim 1 , further comprising the steps of: 

(a) including a link on the registry site, to a different site 
having information of possible interest to the subscriber, said different site being 
provided by a different party; and 

(b) charging a fee to the different party in regard to the 
subscriber accessing the different site via the link on the registry site of the 
subscription service. 

1 3 The method of Claim 1 , further comprising the steps of: 

(a) displaying advertising on the registry site provided by the 

subscription service; and 

(b) the subscription service charging a fee for displaying the 

advertising. 

14 The method of Claim 1 , further comprising the step of enabling the 
subscriber to access the results of the medical test via an electronic data 
communication link to the registry site. 

1 5 The method of Claim I , further comprising the steps of: 

(a) the subscription service identifying an affiliated testing 
agency that will provide the medical test of the subscriber; and 

(b) the subscription service receiving a portion of a fee charged 
to the subscriber by the affiliated testing agency for carrying out the medical test. 
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16. The method of Claim 15, further comprising the step of the 
affiliated testing agency providing a discount to the subscriber for using the 
affiliated testing agency that was specified by the subscription service. 

17. The method of Claim 1, further comprising the step of enabling the 
subscriber to delete the results of the medical test from the registry site, thereby 
terminating a subscription relationship between the subscriber and the registry site. 

18. The method of Claim 1, further comprising the step of enabling the 
subscriber to determine who will have access to the results of the medical test 
stored at the registry site. 

19. The method of Claim 1 , further comprising the step of enabling the 
subscriber to limit access by the party to specific data of the subscriber that are 
stored at the registry site. 

20. The method of Claim 1, further comprising the step of enabling the 
subscriber to specify access rights associated with at least one of a guest password 
and a guest identification number that is provided by the subscriber to the party. 

21. The method of Claim 1, wherein the subscriber and the party 
authorized by the subscriber access the results of the medical test and the indicia 
of the identity of the subscriber over a telephone link with the registry site. 

22. A method for enabling a first person to provide evidence to a 
second person of a medical condition of the first person, based upon results of a 
medical test previously performed on the first person, comprising the steps of: 

(a) obtaining an indicia of identification of the first person in 
connection with confirming an identity of the first person; 

(b) when the medical test is performed, associating the identity 
of the first person and the indicia of identification of the first person with the 
results of the medical test; 

(c) causing the results to be transmitted to a registry site at 
which the results are stored in connection with the indicia of identification and the 
identity of the first person; and 

(d) enabling the first person and any party authorized by the 
first person to access the results and the indicia of identification at the registry site 
over a communication channel that is linked to the registry site, but substantially 
precluding third parties from accessing the results, said second person being 
authorized by the first person to access the results to provide the second person 
with the evidence of the medical condition of the first person. 



BNSDOCID: <WO 0165443A1_I_> 



PCT/US01/05662 

WO 01/65443 -27- 



23. The method of Claim 22, wherein the indicia of identification 
comprise an image of the first person. 

24. The method of Claim 22, wherein the medical condition relates to 
use of drugs. 

25 The me.hod of Claim 22, wherein the first person and the second 
person are prospective sexual partners and the medica, condition reia.es ro a 
sexually transmissible disease. 

,6 The method of Claim 25, wherein the results provide evidence that 
when the medical test was performed, the firs, person did no. .es, posu.vely for 
the sexually transmissible disease. 

27 The method of Claim 25, wherein the results provide evidence that 
when the medical test was performed, the first person was found to have the 
sexually transmissible disease. 

28 The method of Claim 22, further comprising the step of providing 
the first person with an access code that must be employed to access the results 
over the communication channel. 

29 The method of Claim 22, wherein the step of causing the results to 
be transmitted comprises the step of obtaining permission from the first person to 
transmit the results to the registry site. 

30. The method of Claim 22, further comprising the step of 
transmitting the results to the registry site. 

31 The method of Claim 22, wherein the communication channel 
comprises at least one of the Internet, a wireless communication link, a telephone 
ommunLon link, and a wire communication link, and the re gl stry sue 
comprises a subscriber site that is accessed by the first person over the 
communication channel. 

32 The method of Claim 22, wherein the communication channel 
comprises at least one of the Internet, a wireless communication 
communication link, and a wireless — cat.cn link, and sue 
comprises a subscriber site that is accessed by the second person over the 
communication channel. 
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33. The method of Claim 22, further comprising the step of charging 
the first person a fee for accessing the results of the medical test at the registry 
site. 

34. The method of Claim 22, further comprising the step of charging 
the first person a subscription fee to enable the result to be stored by the registry 
site. 

35. The method of Claim 22, further comprising the step of 
maintaining a history of results from medical tests performed on the first person at 
different times, said history including a date at which each medical test was 
performed, for access by any party authorized by the first person. 

36. The method of Claim 22, further comprising the step of 
discounting a cost of the medical test paid by the first person if the first person 
employs a testing agency affiliated with the registry site to conduct the medical 
test on the first person. 

37. The method of Claim 22, wherein the indicia of identification and 
the results of the medical test are accessible by a telephone link with the registry 
site after entering an access code assigned to the first person. 

38. The method of Claim 22, further comprising the steps of carrying 
out steps (a)-(d) to perform a medical test of the second person, access to the 
indicia of identification of the second person and the results of the medical test on 
the second person being substantially limited to said second person and to any 
party authorized by the second person, said second person then authorizing the 
first person to access the indicia of identification of the second person and the 
results of the medical test on the second person on the registry site, to provide the 
first person with evidence of a medical condition of the second person. 

39. A system for enabling limited access to results of a medical test 
performed on a subscriber so that the results are accessible only to authorized 
parties over a communication network, to serve as evidence of a medical 
condition of the subscriber, comprising: 

(a) a server that includes: 

(i) a memory in which a plurality of machine 
instructions are stored; and 



BNSDOCID: <WO 0165443A1_I_> 



PCT/USOl/05662 

WO 01/65443 -29- 



(it) a processor that is coupled to the memory and 
executes the machine instructions, execution of said machine instructions by the 

processor causing the processor to: 

(1) store in the memory the results of the 

medical test of the subscriber and an indicia of an identity of the subscriber, said 
results and said indicia being received from a testing agency that performed the 
medical test; and 

(2) provide restricted access limited to tne 
subscriber and to any party authorized by the subscriber, to the results of the 
medical tests and the indicia of the identity of the subscriber stored in the 
memory, the results, along with the indicia of the identity of the subscriber, 
providing evidence to said party of the medical condition of the subscriber, and 

(b) an interface to a communication network over which the 
subscriber accesses the results of the medical test and the indicia of the identity of 
the subscriber. 

40 The system of Claim 39, wherein the machine instructions cause 
the processor to display the results on a web page with the indicia of the identity 
of the subscriber when the results are accessed by the subscriber and by any party 
authorized by the subscriber, over the communication network. 

4 1 The system of Claim 39, wherein a predefined access code must be 
entered to enable access of the indicia of the identity of the subscriber and the 
results of the medical test on the subscriber. 

42 The system of Claim 39, wherein the medical condition is related 
to a sexually transmissible disease and the party authorized by the subscriber is a 
prospective sexual partner of the subscriber. 

43. The system of Claim 39, wherein the medical condition is related 
to drug use. 

44 The system of Claim 39, wherein the results are transmitted to the 
server over the communication network from the testing agency after 
authorization is provided by the subscriber. 
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45. The system of Claim 39, wherein the results are displayed to the 
subscriber on a web page that includes a link to a different site on the 
communication network where information related to the medical condition is 
accessible. 

46. The system of Claim 39, wherein the results of the medical test are 
accessed over an electronic data communication link by the subscriber and by the 
party authorized by the subscriber. 

47. A system that enables a first person to provide evidence to a 
second person of a medical condition of the first person, based upon results of a 
medical test previously performed on the first person, comprising: 

(a) a memory in which are stored an indicia of an identity of 
the first person, and, in association with the indicia of the identity of the first 
person, the results of the medical test; and 

(b) a processor that communicates with the memory and 
executes machine instructions to enable the first person to access the results and 
the indicia of the identity of the first person over a communication channel that is 
linked to the processor, the first person authorizing access of the indicia of the 
identity of the first person and of the results by the second person, to provide 
evidence to the second person of the medical condition of the first person. 

48. The system of Claim 47, wherein the processor transmits the 
results of the medical tests over the communication channel in a web page that is 
adapted to be displayed to the first person and to the second person, if access 
thereto is authorized by the first person, on a browser. 

49. The system of Claim 47, wherein said web page includes a link to a 
registry site at which information of possible interest to the first person is 
provided. 

50. The system of Claim 47, wherein the web page includes 
advertising. 

51. The system of Claim 47, wherein the medical condition relates to a 
sexually transmissible disease, the results of the test confirming that the person 
did not test positively for the sexually transmissible disease when the medical test 
was performed on the first person. 
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52 The system of Claim 47, wherein the medical condition relates to a 
sexually transmissible disease, the results of the test confirming that the person 
had the sexually transmissible disease when the medical test was performed on the 
first person. 

53 The system of Claim 47, wherein the first person accesses the 
results over the communication network using an electronic data communication 
link. 

54. The system of Claim 47, wherein the indicia of the identity of the 
first person comprise an image of the first person. 

55. The system of Claim 47, wherein the indicia of the identity of the 
first person comprise a driver's license number of the first person. 



BNSDOCID: <WO 0165443A1_L> 



WO 01/65443 



PCT/US01/05662 



1/6 



PERSONAL 

DIGITAL 
ASSISTANT 




,20 



CONSUMER 



1 



24 



u ► 


CELL 




PHONE 



36 




INFORMATION 
KIOSK 



FIREWALL 



LOAD 
BALANCER 



.32 



TEST LAB 
KIOSK 
58 




-38a 




38b 



-38c 



vS 



38d 



1 



WEBSERVER WEBSERVER WEBSERVER WEBSERVER 

1 



TEST LAB 
WORKSTATION 



/ 

UAL 



60 



VIR 
PRIVATE 
NETWORK 



40a 



40b 




30 



APPLICATION APPLICATION DATABASE 
SERVER SERVER SERVER 



46 




48 



50 




f 



54 



3^,56 



REPORT 
SERVER 



E-MAIL 
SERVER 



AD 
SERVER 



ADMIN 
SERVER 



BILLING 
SERVER 



SYSTEM 
MONITOR 



44 



SUPPORT SYSTEMS 



FIG. 1 



BNSDOCID: <WO_ 



_0165443A1_I_> 



WO 01/65443 



2/6 



PCT/US01/05662 



Q START ^ 



1 



100 



SUBSCRIBER REGISTERS 

WITH WEB SITE & 
RECEIVES CUSTOMER ID 



102 



SUBSCRIBER VISITS 
TESTING LAB TO DRAW 
SAMPLE FOR 
REGISTERED TEST 



1 



104 



LAB DRAWS SAMPLE AND 
VERIFIES IDENTITY OF 
SUBSCRIBER 



1 



106 



SUBSCRIBER PROVIDES 
WEB SITE CUSTOMER ID 
TO TESTING LAB 



108 



TESTING LAB RECORDS 

CUSTOMER ID AND ID 
VERIFICATION WITH LAB 
TEST 



1 



110 



LAB TEST COMPLETED 



FIG. 2 



112' 



114' 



lie- 



US' 



120' 



122' 



LAB POSTS TEST 
RESULTS, CUSTOMER ID 
AND ID VERIFICATION TO 
WEB SITE DATABASE 



I 



LAB OR REGISTRY SITE 
NOTIFIES SUBSCRIBER 
THAT TESTS HAVE BEEN 
POSTED 



SUBSCRIBER VERIFIES 
LAB RESULTS AND 
PERSONAL INFORMATION 

ON WEB SITE & SETS 
GUEST ACCESS RIGHTS 



I 



SUBSCRIBER PROVIDES 
PARTNER WITH GUEST 
PASSWORD AND 
CUSTOMER ID 



I 



PARTNER ACCESSES 
AUTHORIZED DATA OF 
SUBSCRIBER ON WEB 
SITE USING GUEST 
PASSWORD AND 
CUSTOMER ID OF 
SUBSCRIBER 



PARTNER REVIEWS 
SUBSCRIBER TEST RESULTS 
AND VERIFIES PARTNER'S 

IDENTITY AGAINST ID 
VERIFICATION (IMAGE) OF 
SUBSCRIBER ON WEB SITE 



T 

C END ^ 



BNSDOCID: <WO 016S443A1J_> 



WO 01/65443 



PCT/USO 1/05662 



START WEB SITE 
REGISTRATION 



150 



1 


✓-152 
r J 


CONSUMER ACCESSES 
WEB SITE USING WEB 
BROWSER 




✓-154 
' ) 


CONSUMER SELECTS 
REGISTRATION OPTION 
TO SUBSCRIBE 




^156 


SUBSCRIBER QUERIED 
FOR PERSONAL INFO 






SUBSCRIBER SELECTS 
PRIMARY USERNAME & 
PASSWORD 


1 


^160 


SUBSCRIBER SELECTS 
GUEST PASSWORD & 
SETS ASSOCIATED 
GUEST ACCESS 
RIGHTS 



L7 



-162 



SUBSCRIBE 
SUBSCRIPT 
AND PA 
MET 


R SELECTS 
ON OPTION 
YMENT 
HOD f 






SUBSCRIBER IS 
ASSIGNED UNIQUE 
CUSTOMER ID 



FIG. 3 



3/6 



START PHONE 
REGISTRATION 



y 



170 



'START TEST LAB 
KIOSK 
REGISTRATION 



1 



172 



190' 



CONSUMER PHONES 

WEB SITE'S 
CUSTOMER SERVICE 



1 



174 



CUSTOMER SERVICE 

REPRESENTATIVE 
COLLECTS PERSONAL 
INFO & DESCRIBES 
SUBSCRIPTION 
OFFERINGS TO 
CONSUMER 



176 



CONSUMEF 
SUBSCRIPT 
AND PA 
MET 


3 SELECTS 
ON OPTION 
YMENT 
HOD 






SUBSCRIBER SELECTS 
PRIMARY USERNAME & 
PASSWORD 






SUBSCRIBE 
GUEST PAi 
SETS ASS 
GUEST y 
RIG 


R SELECTS 
5SWORD & 
50CIATED 
ACCESS 
HTS 




, r 182 


SUBSCRIBER IS 
ASSIGNED UNIQUE 
CUSTOMER ID 



FIG. 4 



192 



CONSUMER VISITS 
TEST LAB AND USES 
KIOSK TO ACCESS 
WEB SITE 



1 



194 



CONSUMER SELECTS 
REGISTRATION OPTION 
TO SUBSCRIBE 



1 



196 



SUBSCRIBER QUERIED 
FOR PERSONAL INFO 



1 



198 



SUBSCRIBER SELECTS 
PRIMARY USERNAME & 
PASSWORD 



1 



200 



SUBSCRIBER SELECTS 
GUEST PASSWORD & 
SETS ASSOCIATED 
GUEST ACCESS 
RIGHTS 



202 



SUBSCRIBER SELECTS 
SUBSCRIPTION OPTION 
AND PAYMENT 
METHOD 



204 



SUBSCRIBER IS 
ASSIGNED UNIQUE 
CUSTOMER ID 



FIG. 5 



BNSDOCID: <WO_ 



WO 01/65443 



4/6 



PCT/US01/05662 



START PROCEDURE TO 
VERIFY IDENTITY USING 
DRIVER'S LICENSE 



TESTING LAB REVIEWS 
SUBSCRIBER'S DRIVER'S 
LICENSE & MAY MATCH ID 
INFORMATION WITH THAT 
ON REGISTRY SITE 



if 



212 



I 



TESTING LAB RECORDS 
DRIVER'S LICENSE NUMBER 
WITH TEST ORDER 



if 



214 



TESTING LAB DRAWS 
SAMPLE, VERIFIES 

IDENTIFICATION, AND 
COMPLETES TEST 



216 



I 



SUBSCRIBER PROVIDES 
CUSTOMER ID TO 
TESTING LAB 



V 



I 



218 



TESTING LAB RECORDS 
CUSTOMER ID AND 
DRIVER'S LICENSE NUMBER 
WITH TEST RESULTS 



if 



220 



OPTIONAL - SCANNED 
IMAGE OF DRIVER'S 
LICENSE IS INCLUDED WITH 
TEST RESULTS WHEN 
POSTED TO WEB SITE 



f 



222 



TEST RESULTS ACCESSED 
AT WEB SITE ARE LINKED 

TO DRIVER'S LICENSE 
NUMBER (AND SCANNED 
IMAGE OF LICENSE -- IF 
PROVIDED) 



224 



START PROCEDURE TO 
VERIFY IDENTITY USING 
PHOTO OF SUBSCRIBER 



r\ r 23o 

2/ 



TESTING LAB TAKES 
DIGITAL PHOTO OF 
SUBSCRIBER 



If 



232 



DIGITAL PHOTO IS 
ATTACHED TO TEST 
RECORDS 



234 



LAB DRAWS SAMPLE 



LAB COMPLETES TEST 



1 



236 



238 



WHEN TEST RESULTS ARE 

POSTED TO WEB SITE, 
DIGITAL PHOTOGRAPH IS 
INCLUDED 



240 



TEST RESULTS VIEWED ON 
WEB SITE ARE LINKED TO 
DIGITAL PHOTOGRAPH, 
ENABLING IMAGE OF 
SUBSCRIBER TO BE 
DISPLAYED ON WEB SITE IN 
ASSOCIATION WITH TEST 
RESULTS 



242 



FIG. 6 



FIG. 7 



0165443A1 l_> 



WO 01/65443 



PCT/U SO 1/05662 



5/6 



250 



START AUTOMATED 
POSTING OF RESULTS 
BY TESTING LAB 




1 



260 



START REVIEW OF 
RESULTS BY TESTING 
LAB 



TESTING LAB 
DETERMINES TEST 
RESULTS 



I 




262 



TEST RESULTS 
PRODUCED BY 
TESTING LAB 



1 



254 



TESTING LAB POSTS 
RESULTS OF TEST ON 
WEB SITE VIA SSL 
ENCRYPTED LINK 



1 



264 



1 



256 



TEST RESULTS 
INCLUDE CONSUMER 

ACCOUNT ID AND 
SUBSCRIBER PROOF 
OF IDENTITY (DRIVER'S 
LICENSE NUMBER, 
SCANNED IMAGE, OR 
DIGITAL PHOTO) 



FIG. 8 



TESTING LAB NOTIFIES 
SUBSCRIBER OF TEST 
RESULTS 



1 


1 X 266 


SUBSCRIBER 
REQUESTS TESTING 
LAB TO POST RESULTS 
TO WEB SITE 


i 


, r 268 


TESTING LAB POSTS 
TEST RESULTS TO 
WEB SITE 




, r 270 



TEST RESULTS 
ASSOCIATED WITH 
CONSUMER ACCOUNT 
ID AND VERIFICATION 
OF IDENTITY (DRIVER'S 
LICENSE NUMBER, 
SCANNED IMAGE, OR 
DIGITAL PHOTO) 



1 



280 



START MANUAL 
POSTING OF TEST 
RESULTS 



282 



TEST RESULTS 
PRODUCED BY 
TESTING LAB, WHICH 
MAY BE UNAFFILIATED 
WITH REGISTRY SITE 



1 


, r 284 


TESTING LAB NOTIFIES 
SUBSCRIBER OF TEST 
RESULTS 


i 


, r 286 


SUBSCRIBER ENTERS 

TEST RESULTS ON 
WEB SITE MANUALLY 
(VIA BROWSER) 




, r 288 



TEST RESULTS ARE 
NOT ASSOCIATED 
WITH PROOF OF 
SUBSCRIBER'S 
IDENTITY 



FIG. 10 



FIG. 9 



BNSDOCID: <WO_ 



_0165443A1J_> 



WO 01/65443 



6/6 



PCT/US01/05662 



304^- 



HARD 
DRIVE 



302 



300 



MEMORY 
(ROM & RAM) 



2 



308 




DISPLAY 



CPU 



NETWORK 
INTERFACE 



1 



306 



DISPLAY 
INTERFACE 



312 



1 



310 



USER INPUT 
DEVICES 



TO WEB SITE SERVER 
(DATABASE STORING 

TEST RESULTS) FIG 11 



BNSDOCID: <WO_ 0165443A1_I_> 



INTERNATIONAL SEARCH REPORT 



International application No. 
PCT/US01/05662 



A. CLASSIFICATION OF SUBJECT MATTER 
IPC(7) :G06F 17/60 
US CL : 705/2 

According to International Patent Classification (IPC) or to both national classification and IPC 



FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 
U.S. : 705/2, 3. 4 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 
EAST (US Patents. Derwent, EPO, JPO), PROQUEST (all databases) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



A 
A 

A,P 



US 6,073,106 A (ROZEN et al) 06 June 2000, see abstract. 

US 5,325,294 A (KEENE) 28 June 1994, see abstract. 

US 4,315,309 (COLI) 09 February 1982, see abstract. 

HROBJARTUR, JONATANSSON. Iceland's health sector database: 
A significant head start in the search for biological grail or an 
irreversible error?. American Journal of Law and Medicine. 2000. 
Vol. 26. No. 1. pages 31-67. 



1-55 
1-55 
1-55 
1-55 



| x| Further documents are listed in the continuation of Box C. |~] See patent family annex. 



" Special categories of cited documents: 

'A* document defining the general state of the art which is not considered 

to be of particular relevance 

"E* earlier document published on or after the international filing date 

"L" document which may throw doubts on priority claim (s> or which is 

cited to establish the publication date of another citation or other 
special reason (as specified) 

*0" document referring to an oral disclosure, use. exhibition or other 

means 

■p* document published prior to the international filing date but later than 

the priority date claimed 



later document published after the international Tiling date or priority 
date and not in conflict with the application but cited to understand 
the principle or theory underlying the invention 

document of paruculai relevance; the claimed invention cannot be 
considered novel or cannot be considered to involve an inventive step 
when the document is taken atone 

document of particular relevance; the claimed invention cannot be 
considered to involve an inventive step when the document is 
combined with one or more other such documents, such combination 
being obvious to a person skilled in the art 

document member of the same patent family 



Date of the actual completion of the international search 



21 APRIL 2001 



Date of mailing of the international search report 

04 May 2001 (04.05.01) 



Name and mailing address of the ISA/ US 
Commissioner of Patents and Trademarks 
Box PCT 

Washington. D C. 20231 
Facsimile No. (703) 305-3230 



Authorized officer 

TARIQ HAFIZ \ a ^f = 2^ 
Telephone No. (703) 305-9643 



Form PCT/ISA/210 (second sheet) (July 1998) • 



BNSDOCID: <WO_ 



_0165443A1_L 



INTERNATIONAL SEARCH REPORT 



International application No. 
PCT/US01/05662 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 


Citation of document, with indication, where appropriate, of the relevant passages 


Relevant to claim No. 


A 

i 


WULLIANALLUR et al. Strategic uses of information technology 
in health care: A state-of-the-art survey. Topics in Health 
Information Management. August 1999. Vol. 20. No. 1. page 1. 


1-55 


A 


WEBER, DAVID O. Web sites of tomorrow: How the Internet will 
transform healthcare. Health Forum Journal. June 1999. Vol. 42. 
No. 3. pages 40-45. 


1-55 



Form PCT/ISA/210 (continuation of second sheet) (July 1998) * 



BNSDOCID: <WO, 0165443A1_I_> 



